GDPR & AVG compliance guide
A practical guide to understanding what GDPR and the Dutch AVG require for cookie consent, and how NoNonsense Cookie keeps you compliant.
What GDPR requires for cookies
The General Data Protection Regulation (GDPR) and the Dutch AVG set clear rules for how websites must handle cookies. Here are the key requirements:
Prior consent: Non-essential cookies may only be placed after the visitor gives explicit consent.
Informed consent: Visitors must be clearly told what cookies are used and for what purpose.
Granular choice: Visitors must be able to accept or reject cookies by category, not just "accept all".
Easy withdrawal: It must be as easy to withdraw consent as it is to give it.
Proof of consent: You must be able to demonstrate that consent was given if requested during an audit.
How NoNonsense Cookie keeps you compliant
NoNonsense Cookie is designed from the ground up to meet every GDPR requirement. No pre-checked boxes, no dark patterns, no tricks. The "Reject" button is always equally prominent as the "Accept" button. Cookie categories are clearly explained to visitors. And we make it impossible to configure the banner in a non-compliant way — so you can't accidentally break the rules.
Consent records and audit proof
Every time a visitor makes a consent choice, NoNonsense Cookie creates a privacy-preserving record. We store a hashed identifier (never personal data), the choices made, and a timestamp. These records are available in your dashboard and serve as proof of compliance during audits. Records are retained for the legally required period.
No dark patterns, guaranteed
Many cookie banners use dark patterns to trick visitors into accepting all cookies — pre-checked boxes, hidden reject buttons, confusing language. NoNonsense Cookie takes the opposite approach. Both "Accept" and "Reject" are equally visible. No categories are pre-selected. The language is clear and simple. This isn't just ethical — it's what the law requires, and it's what your visitors deserve.